Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/F8DFCDA33DD9634FB8A5D5732BA010FB18338DFC.mft
File:                     F8DFCDA33DD9634FB8A5D5732BA010FB18338DFC.mft (raw, json)
Hash identifier:          9L6r07r1cay6eTM0t/XRmBdY1lhFiVr2FQBLjYV/Yns=
Subject key identifier:   5D:6A:09:27:AC:9C:DC:F1:F9:07:71:53:46:42:E9:9F:E8:55:D4:E4
Authority key identifier: F8:DF:CD:A3:3D:D9:63:4F:B8:A5:D5:73:2B:A0:10:FB:18:33:8D:FC
Certificate issuer:       /CN=F8DFCDA33DD9634FB8A5D5732BA010FB18338DFC
Certificate serial:       080456DBC4CCA7BD54D32FFACDF1D3D43484CA95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8DFCDA33DD9634FB8A5D5732BA010FB18338DFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/F8DFCDA33DD9634FB8A5D5732BA010FB18338DFC.mft
Manifest number:          1D
Signing time:             Mon 15 Apr 2024 10:29:58 +0000
Manifest this update:     Mon 15 Apr 2024 10:24:58 +0000
Manifest next update:     Tue 16 Apr 2024 14:05:58 +0000
Files and hashes:         1: F8DFCDA33DD9634FB8A5D5732BA010FB18338DFC.crl (hash: CQGQuUWf8dQyb9PSROtDsIxUBfsoK8JOcXmDcesCdTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:04:56:db:c4:cc:a7:bd:54:d3:2f:fa:cd:f1:d3:d4:34:84:ca:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8DFCDA33DD9634FB8A5D5732BA010FB18338DFC
        Validity
            Not Before: Apr 15 10:24:58 2024 GMT
            Not After : Apr 16 14:05:58 2024 GMT
        Subject: CN=5D6A0927AC9CDCF1F90771534642E99FE855D4E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:fb:1f:e7:45:12:b4:36:c5:5d:e0:54:4d:
                    83:41:2c:ad:37:b3:5b:6d:17:15:9c:01:ae:14:42:
                    a7:4b:6b:43:f2:fe:99:85:b1:7f:25:37:fd:5e:26:
                    6f:fc:fd:9b:b1:36:f2:28:04:6c:f4:1a:5e:c4:28:
                    da:46:a2:e1:90:b7:5b:99:f4:5c:f3:84:75:4a:39:
                    2d:f7:5a:bc:72:10:e6:5f:75:be:0c:ed:f8:96:a2:
                    ea:11:76:43:30:02:b8:32:4d:23:68:dd:e8:3a:56:
                    9e:aa:81:2d:02:d3:75:a0:1f:1e:27:04:4d:b6:73:
                    34:71:6f:29:5b:6f:8d:8d:ca:ef:9c:86:7d:b8:a3:
                    a7:2c:bd:9e:1d:12:da:09:63:47:15:ab:93:56:09:
                    23:3f:70:d6:b3:e0:75:f2:83:82:d0:e8:c3:36:21:
                    3f:2b:fb:37:90:b0:fb:f6:17:a7:86:00:7d:b1:f8:
                    d9:6a:bd:b6:56:ef:ef:0a:8f:01:46:ab:0c:9d:6d:
                    f6:fe:bc:ef:3d:7f:60:c2:08:14:52:e6:4a:83:13:
                    b7:cb:77:65:9f:7e:c0:c6:93:1d:5e:a2:9b:42:a3:
                    a1:91:24:68:07:75:60:6a:36:3f:cc:c3:8f:a1:a3:
                    c4:c7:8a:c9:a3:b5:dc:d4:f3:4b:0b:fe:19:ed:fa:
                    53:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6A:09:27:AC:9C:DC:F1:F9:07:71:53:46:42:E9:9F:E8:55:D4:E4
            X509v3 Authority Key Identifier:
                keyid:F8:DF:CD:A3:3D:D9:63:4F:B8:A5:D5:73:2B:A0:10:FB:18:33:8D:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/F8DFCDA33DD9634FB8A5D5732BA010FB18338DFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F8DFCDA33DD9634FB8A5D5732BA010FB18338DFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/0/F8DFCDA33DD9634FB8A5D5732BA010FB18338DFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:1f:35:2c:7a:d9:26:8e:f4:a4:37:95:74:4c:b7:02:6a:c8:
         69:e2:06:80:ca:10:7f:70:20:d1:24:8a:01:8e:31:92:7d:20:
         2c:1a:b9:b4:cd:95:c1:c5:b4:0b:dc:14:2a:0d:ad:fa:cb:92:
         9b:1a:27:4e:72:76:ea:f5:da:d4:65:b4:8d:25:13:15:a5:73:
         fd:57:02:b7:23:bf:25:ba:9b:5c:d6:08:0c:59:a8:56:84:bd:
         63:db:a1:48:95:8b:35:11:eb:df:a7:ce:45:ff:16:6a:c0:05:
         4f:9d:1f:02:ea:bb:9f:ee:8d:a6:45:69:2e:59:80:6d:f0:12:
         11:67:77:85:19:4c:89:38:a6:3e:42:1a:73:dd:e5:8f:60:bb:
         8a:74:b9:45:f3:1b:8b:ce:94:cf:2c:b9:ca:31:de:df:3a:c1:
         d7:44:39:7d:71:48:b9:3c:16:a1:ca:d7:c8:ac:dc:17:36:fb:
         a8:46:4f:50:63:5a:a1:73:16:07:a2:d0:71:9b:a4:9e:42:61:
         db:ab:b7:f6:1b:d8:75:80:44:db:a1:4e:9f:04:d1:89:c4:34:
         04:f6:79:2e:f7:31:63:09:88:bc:3c:ba:5a:70:31:78:5c:64:
         6f:fa:84:db:9a:3b:25:fc:55:c9:c9:5b:bd:1d:36:40:91:50:
         c4:d2:fd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:33 2024 by rpki-client on console-ams.rpki-client.org